
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
deepseek-flow
Advanced tools
DeepSeek Flow — Markdown-first visual workflow plugin for DeepSeek Harness with common logic gates, two-way canvas sync, and AI review/optimization.
A Markdown-first visual workflow editor for DeepSeek Harness.
English · 简体中文
DeepSeek Flow turns a WORKFLOW.md and its step-level STEP.md files into an editable diagram inside DeepSeek Harness. The diagram and the Markdown stay synchronized, so you can work visually without giving up portable, reviewable files.
It is intentionally an editor—not a workflow runtime. DeepSeek Flow helps you design, inspect, and improve a workflow; execution remains in the current Session.
WORKFLOW.md, plus one STEP.md workspace for each step.Install from GitHub into the Web profile:
dsh plugin --profile web add "github:kanghelyu/dsh-deepseek-flow#main"
Restart dsh web, open a session, and select the DeepSeek Flow tab.
To confirm that the plugin is mounted:
dsh web --dump-config | grep deepseek-flow
A typical workflow directory looks like this:
my-workflow/
├── WORKFLOW.md
├── flow.json
└── steps/
├── research/
│ └── STEP.md
├── draft/
│ └── STEP.md
└── quality-check/
└── STEP.md
Every AI action is started manually. DeepSeek Flow never runs validation or optimization behind your back.
| Action | Scope | What happens before files change |
|---|---|---|
| Logic validation | All workflow documents and arrow relationships | The Agent returns clickable errors and warnings; no file is changed. |
| Optimize current document | The selected WORKFLOW.md or STEP.md only | A complete proposal appears in the preview. You must Accept or Reject it. |
| Optimize entire workflow | WORKFLOW.md and every STEP.md | A warning is shown first. After confirmation, the Agent rewrites and saves the complete set directly. There is no per-document review or built-in undo. |
For whole-workflow optimization, commit or back up important Markdown files first. If a document changes while an optimization is running, DeepSeek Flow refuses to overwrite the newer content.
The assistant uses an isolated Agent job and does not run the workflow. Model and reasoning-effort controls are available in the assistant menu.
DeepSeek Flow deliberately does not provide:
That boundary keeps the plugin focused: edit and validate in DeepSeek Flow, execute in the Session.
Clone the repository and link it into your Web profile:
git clone https://github.com/kanghelyu/dsh-deepseek-flow.git
cd dsh-deepseek-flow
dsh plugin --profile web add "link:$PWD"
Useful checks:
npm test
npm run build
npm run smoke
If an older local Harness installation is missing linked dependencies, stop dsh web before running:
bash scripts/ensure-deps.sh
After changing client code, rebuild and hard-refresh the browser. Host changes require restarting dsh web.
deepseek-flow/
├── lib/ Host code and committed client bundle
├── src/client/ WebUI client source
├── scripts/ Build, dependency, screenshot, and smoke checks
├── test/ Contract and regression tests
├── examples/ Example Markdown workflow
└── docs/images/ README screenshots
dsh web --dump-config, then restart the Web profile.npm run build, restart when Host code changed, and hard-refresh the browser.dsh plugin --profile web remove deepseek-flow
MIT. Community project; not affiliated with DeepSeek.
FAQs
DeepSeek Flow — Markdown-first visual workflow plugin for DeepSeek Harness with executable Boolean gate semantics, two-way canvas sync, and AI review/optimization.
The npm package deepseek-flow receives a total of 0 weekly downloads. As such, deepseek-flow popularity was classified as not popular.
We found that deepseek-flow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.